Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa
File:                     Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa (raw, json)
Hash identifier:          5dvKe+adVjjIqSEHKvyOg1GknXyHhJr5TpcBMwRa/wQ=
Subject key identifier:   46:8E:AC:0C:A9:15:E7:28:2F:81:AF:6A:24:2E:07:B5:BF:44:07:B6
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0FB1
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa
Signing time:             Fri 01 Sep 2023 08:29:26 +0000
ROA not before:           Fri 01 Sep 2023 08:29:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63199
IP address blocks:        150.116.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4017 (0xfb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep  1 08:29:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=468EAC0CA915E7282F81AF6A242E07B5BF4407B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:23:f8:1e:18:fe:c6:cb:1a:02:e2:c9:84:
                    b8:23:5c:30:20:9e:90:99:c1:e2:79:0d:a5:95:f8:
                    2b:8d:fd:de:b7:88:f6:f8:ad:8c:af:60:90:3a:68:
                    3d:01:2b:1a:9c:4c:ca:70:64:84:c7:a9:18:08:d7:
                    83:91:ea:25:7f:cc:22:17:3e:73:c5:1e:30:1b:4b:
                    20:ef:11:84:7f:b3:67:b3:98:c8:bd:c5:72:96:3d:
                    dd:9f:c7:5d:af:1e:16:5d:fc:6e:7d:8d:f1:59:b7:
                    ba:24:7a:34:42:55:0d:f1:45:1b:1b:ab:01:15:31:
                    fa:53:e9:17:0d:44:74:ae:72:0a:02:27:8e:c6:b8:
                    b9:50:a8:d2:93:6a:d7:cf:84:d8:54:cc:2f:8a:59:
                    ed:27:b2:c6:e9:6b:9b:d0:7b:ac:e3:f8:2f:23:4d:
                    1e:23:fd:b5:be:19:bd:47:8c:ac:01:e8:ca:76:e0:
                    01:74:29:88:bb:98:07:3a:fa:31:68:dd:30:0d:7c:
                    c6:25:ef:11:46:39:a3:6e:68:01:d6:33:b9:39:00:
                    b3:b6:69:06:7c:3f:60:1c:d4:be:68:2a:1c:05:33:
                    17:c2:1f:72:ba:8f:cc:be:9a:63:1b:80:2d:bb:e3:
                    db:c2:91:4c:c8:db:61:2e:a5:9c:18:22:a2:e7:94:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8E:AC:0C:A9:15:E7:28:2F:81:AF:6A:24:2E:07:B5:BF:44:07:B6
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Ro6sDKkV5ygvga9qJC4Htb9EB7Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:a4:dd:ab:bc:71:23:27:9c:98:4b:0e:2a:e1:83:f1:f0:
         c3:62:a6:05:79:5d:c3:8d:fd:72:49:66:a5:04:ec:e5:1b:17:
         db:fb:22:cd:b7:5f:92:cc:d4:8c:2a:7b:38:d8:49:e3:01:31:
         3c:75:c5:83:08:a9:a7:7f:9c:ec:b5:98:88:da:30:b5:a7:4a:
         85:20:a2:62:cd:76:a9:96:25:f7:25:49:1c:81:41:d5:3f:27:
         cd:af:35:85:a1:45:ee:04:7e:76:b0:cb:c9:68:8a:c9:3c:2c:
         60:89:e1:f6:c2:21:30:6b:44:95:46:d7:aa:6b:08:da:82:eb:
         04:c6:40:3e:8c:2b:67:ca:ee:1c:d4:0f:ae:d3:57:e0:a1:82:
         7f:a9:51:4f:4f:74:57:c9:3c:89:43:67:1a:a0:55:da:54:0a:
         a6:c0:6e:e7:a1:8b:a5:68:74:54:65:c5:df:77:28:4c:a9:b5:
         e7:6c:15:fc:7e:c8:d9:fc:5c:f8:d4:e1:8b:4e:68:bb:00:ac:
         66:18:26:09:eb:10:a7:58:9e:67:35:75:88:c5:26:ac:0d:c8:
         63:3b:97:56:0b:72:47:31:69:6b:19:62:75:39:33:21:c2:18:
         c7:3f:a3:c6:68:6d:ab:53:56:df:fd:b5:c6:b0:4d:81:fb:a4:
         a2:53:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org